@workos-inc/node 8.0.0-rc.2 → 8.0.0-rc.4

package/lib/cjs/common/crypto/signature-provider.cjs

@@ -1,84 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var signature_provider_exports = {};
-__export(signature_provider_exports, {
-  SignatureProvider: () => SignatureProvider
-});
-module.exports = __toCommonJS(signature_provider_exports);
-var import_exceptions = require('../exceptions/index.cjs');
-class SignatureProvider {
-  static {
-    __name(this, "SignatureProvider");
-  }
-  cryptoProvider;
-  constructor(cryptoProvider) {
-    this.cryptoProvider = cryptoProvider;
-  }
-  async verifyHeader({
-    payload,
-    sigHeader,
-    secret,
-    tolerance = 18e4
-  }) {
-    const [timestamp, signatureHash] = this.getTimestampAndSignatureHash(sigHeader);
-    if (!signatureHash || Object.keys(signatureHash).length === 0) {
-      throw new import_exceptions.SignatureVerificationException(
-        "No signature hash found with expected scheme v1"
-      );
-    }
-    if (parseInt(timestamp, 10) < Date.now() - tolerance) {
-      throw new import_exceptions.SignatureVerificationException(
-        "Timestamp outside the tolerance zone"
-      );
-    }
-    const expectedSig = await this.computeSignature(timestamp, payload, secret);
-    if (await this.cryptoProvider.secureCompare(expectedSig, signatureHash) === false) {
-      throw new import_exceptions.SignatureVerificationException(
-        "Signature hash does not match the expected signature hash for payload"
-      );
-    }
-    return true;
-  }
-  getTimestampAndSignatureHash(sigHeader) {
-    const signature = sigHeader;
-    const [t, v1] = signature.split(",");
-    if (typeof t === "undefined" || typeof v1 === "undefined") {
-      throw new import_exceptions.SignatureVerificationException(
-        "Signature or timestamp missing"
-      );
-    }
-    const { 1: timestamp } = t.split("=");
-    const { 1: signatureHash } = v1.split("=");
-    return [timestamp, signatureHash];
-  }
-  async computeSignature(timestamp, payload, secret) {
-    payload = JSON.stringify(payload);
-    const signedPayload = `${timestamp}.${payload}`;
-    return await this.cryptoProvider.computeHMACSignatureAsync(
-      signedPayload,
-      secret
-    );
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  SignatureProvider
-});
-//# sourceMappingURL=signature-provider.cjs.map

package/lib/cjs/common/crypto/signature-provider.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/common/crypto/signature-provider.ts"],"sourcesContent":["import { SignatureVerificationException } from '../exceptions';\nimport { CryptoProvider } from './crypto-provider';\n\nexport class SignatureProvider {\n  private cryptoProvider: CryptoProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.cryptoProvider = cryptoProvider;\n  }\n\n  async verifyHeader({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: any;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<boolean> {\n    const [timestamp, signatureHash] =\n      this.getTimestampAndSignatureHash(sigHeader);\n\n    if (!signatureHash || Object.keys(signatureHash).length === 0) {\n      throw new SignatureVerificationException(\n        'No signature hash found with expected scheme v1',\n      );\n    }\n\n    if (parseInt(timestamp, 10) < Date.now() - tolerance) {\n      throw new SignatureVerificationException(\n        'Timestamp outside the tolerance zone',\n      );\n    }\n\n    const expectedSig = await this.computeSignature(timestamp, payload, secret);\n    if (\n      (await this.cryptoProvider.secureCompare(expectedSig, signatureHash)) ===\n      false\n    ) {\n      throw new SignatureVerificationException(\n        'Signature hash does not match the expected signature hash for payload',\n      );\n    }\n    return true;\n  }\n\n  getTimestampAndSignatureHash(sigHeader: string): [string, string] {\n    const signature = sigHeader;\n    const [t, v1] = signature.split(',');\n    if (typeof t === 'undefined' || typeof v1 === 'undefined') {\n      throw new SignatureVerificationException(\n        'Signature or timestamp missing',\n      );\n    }\n    const { 1: timestamp } = t.split('=');\n    const { 1: signatureHash } = v1.split('=');\n\n    return [timestamp, signatureHash];\n  }\n\n  async computeSignature(\n    timestamp: any,\n    payload: any,\n    secret: string,\n  ): Promise<string> {\n    payload = JSON.stringify(payload);\n    const signedPayload = `${timestamp}.${payload}`;\n\n    return await this.cryptoProvider.computeHMACSignatureAsync(\n      signedPayload,\n      secret,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAA+C;AAGxC,MAAM,kBAAkB;AAAA,EAH/B,OAG+B;AAAA;AAAA;AAAA,EACrB;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAEA,MAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAKqB;AACnB,UAAM,CAAC,WAAW,aAAa,IAC7B,KAAK,6BAA6B,SAAS;AAE7C,QAAI,CAAC,iBAAiB,OAAO,KAAK,aAAa,EAAE,WAAW,GAAG;AAC7D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,EAAE,IAAI,KAAK,IAAI,IAAI,WAAW;AACpD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,KAAK,iBAAiB,WAAW,SAAS,MAAM;AAC1E,QACG,MAAM,KAAK,eAAe,cAAc,aAAa,aAAa,MACnE,OACA;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,6BAA6B,WAAqC;AAChE,UAAM,YAAY;AAClB,UAAM,CAAC,GAAG,EAAE,IAAI,UAAU,MAAM,GAAG;AACnC,QAAI,OAAO,MAAM,eAAe,OAAO,OAAO,aAAa;AACzD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,EAAE,GAAG,UAAU,IAAI,EAAE,MAAM,GAAG;AACpC,UAAM,EAAE,GAAG,cAAc,IAAI,GAAG,MAAM,GAAG;AAEzC,WAAO,CAAC,WAAW,aAAa;AAAA,EAClC;AAAA,EAEA,MAAM,iBACJ,WACA,SACA,QACiB;AACjB,cAAU,KAAK,UAAU,OAAO;AAChC,UAAM,gBAAgB,GAAG,SAAS,IAAI,OAAO;AAE7C,WAAO,MAAM,KAAK,eAAe;AAAA,MAC/B;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/lib/cjs/common/crypto/signature-provider.d.cts

@@ -1,16 +0,0 @@
-import { CryptoProvider } from './crypto-provider.cjs';
-
-declare class SignatureProvider {
-    private cryptoProvider;
-    constructor(cryptoProvider: CryptoProvider);
-    verifyHeader({ payload, sigHeader, secret, tolerance, }: {
-        payload: any;
-        sigHeader: string;
-        secret: string;
-        tolerance?: number;
-    }): Promise<boolean>;
-    getTimestampAndSignatureHash(sigHeader: string): [string, string];
-    computeSignature(timestamp: any, payload: any, secret: string): Promise<string>;
-}
-
-export { SignatureProvider };

package/lib/cjs/common/crypto/subtle-crypto-provider.cjs

@@ -1,152 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var subtle_crypto_provider_exports = {};
-__export(subtle_crypto_provider_exports, {
-  SubtleCryptoProvider: () => SubtleCryptoProvider
-});
-module.exports = __toCommonJS(subtle_crypto_provider_exports);
-var import_crypto_provider = require('./crypto-provider.cjs');
-class SubtleCryptoProvider extends import_crypto_provider.CryptoProvider {
-  static {
-    __name(this, "SubtleCryptoProvider");
-  }
-  subtleCrypto;
-  constructor(subtleCrypto) {
-    super();
-    this.subtleCrypto = subtleCrypto || crypto.subtle;
-  }
-  computeHMACSignature(_payload, _secret) {
-    throw new Error(
-      "SubleCryptoProvider cannot be used in a synchronous context."
-    );
-  }
-  /** @override */
-  async computeHMACSignatureAsync(payload, secret) {
-    const encoder = new TextEncoder();
-    const key = await this.subtleCrypto.importKey(
-      "raw",
-      encoder.encode(secret),
-      {
-        name: "HMAC",
-        hash: { name: "SHA-256" }
-      },
-      false,
-      ["sign"]
-    );
-    const signatureBuffer = await this.subtleCrypto.sign(
-      "hmac",
-      key,
-      encoder.encode(payload)
-    );
-    const signatureBytes = new Uint8Array(signatureBuffer);
-    const signatureHexCodes = new Array(signatureBytes.length);
-    for (let i = 0; i < signatureBytes.length; i++) {
-      signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];
-    }
-    return signatureHexCodes.join("");
-  }
-  /** @override */
-  async secureCompare(stringA, stringB) {
-    const bufferA = this.encoder.encode(stringA);
-    const bufferB = this.encoder.encode(stringB);
-    if (bufferA.length !== bufferB.length) {
-      return false;
-    }
-    const algorithm = { name: "HMAC", hash: "SHA-256" };
-    const key = await crypto.subtle.generateKey(algorithm, false, [
-      "sign",
-      "verify"
-    ]);
-    const hmac = await crypto.subtle.sign(algorithm, key, bufferA);
-    const equal = await crypto.subtle.verify(algorithm, key, hmac, bufferB);
-    return equal;
-  }
-  async encrypt(plaintext, key, iv, aad) {
-    const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));
-    const cryptoKey = await this.subtleCrypto.importKey(
-      "raw",
-      key,
-      { name: "AES-GCM" },
-      false,
-      ["encrypt"]
-    );
-    const encryptParams = {
-      name: "AES-GCM",
-      iv: actualIv
-    };
-    if (aad) {
-      encryptParams.additionalData = aad;
-    }
-    const encryptedData = await this.subtleCrypto.encrypt(
-      encryptParams,
-      cryptoKey,
-      plaintext
-    );
-    const encryptedBytes = new Uint8Array(encryptedData);
-    const tagSize = 16;
-    const tagStart = encryptedBytes.length - tagSize;
-    const tag = encryptedBytes.slice(tagStart);
-    const ciphertext = encryptedBytes.slice(0, tagStart);
-    return {
-      ciphertext,
-      iv: actualIv,
-      tag
-    };
-  }
-  async decrypt(ciphertext, key, iv, tag, aad) {
-    const combinedData = new Uint8Array(ciphertext.length + tag.length);
-    combinedData.set(ciphertext, 0);
-    combinedData.set(tag, ciphertext.length);
-    const cryptoKey = await this.subtleCrypto.importKey(
-      "raw",
-      key,
-      { name: "AES-GCM" },
-      false,
-      ["decrypt"]
-    );
-    const decryptParams = {
-      name: "AES-GCM",
-      iv
-    };
-    if (aad) {
-      decryptParams.additionalData = aad;
-    }
-    const decryptedData = await this.subtleCrypto.decrypt(
-      decryptParams,
-      cryptoKey,
-      combinedData
-    );
-    return new Uint8Array(decryptedData);
-  }
-  randomBytes(length) {
-    const bytes = new Uint8Array(length);
-    crypto.getRandomValues(bytes);
-    return bytes;
-  }
-}
-const byteHexMapping = new Array(256);
-for (let i = 0; i < byteHexMapping.length; i++) {
-  byteHexMapping[i] = i.toString(16).padStart(2, "0");
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  SubtleCryptoProvider
-});
-//# sourceMappingURL=subtle-crypto-provider.cjs.map

package/lib/cjs/common/crypto/subtle-crypto-provider.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/common/crypto/subtle-crypto-provider.ts"],"sourcesContent":["import { CryptoProvider } from './crypto-provider';\n\n/**\n * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.\n *\n * This only supports asynchronous operations.\n */\nexport class SubtleCryptoProvider extends CryptoProvider {\n  subtleCrypto: SubtleCrypto;\n\n  constructor(subtleCrypto?: SubtleCrypto) {\n    super();\n\n    // If no subtle crypto is interface, default to the global namespace. This\n    // is to allow custom interfaces (eg. using the Node webcrypto interface in\n    // tests).\n    this.subtleCrypto = subtleCrypto || crypto.subtle;\n  }\n\n  computeHMACSignature(_payload: string, _secret: string): string {\n    throw new Error(\n      'SubleCryptoProvider cannot be used in a synchronous context.',\n    );\n  }\n\n  /** @override */\n  async computeHMACSignatureAsync(\n    payload: string,\n    secret: string,\n  ): Promise<string> {\n    const encoder = new TextEncoder();\n\n    const key = await this.subtleCrypto.importKey(\n      'raw',\n      encoder.encode(secret),\n      {\n        name: 'HMAC',\n        hash: { name: 'SHA-256' },\n      },\n      false,\n      ['sign'],\n    );\n\n    const signatureBuffer = await this.subtleCrypto.sign(\n      'hmac',\n      key,\n      encoder.encode(payload),\n    );\n\n    // crypto.subtle returns the signature in base64 format. This must be\n    // encoded in hex to match the CryptoProvider contract. We map each byte in\n    // the buffer to its corresponding hex octet and then combine into a string.\n    const signatureBytes = new Uint8Array(signatureBuffer);\n    const signatureHexCodes = new Array(signatureBytes.length);\n\n    for (let i = 0; i < signatureBytes.length; i++) {\n      signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];\n    }\n\n    return signatureHexCodes.join('');\n  }\n\n  /** @override */\n  async secureCompare(stringA: string, stringB: string): Promise<boolean> {\n    const bufferA = this.encoder.encode(stringA);\n    const bufferB = this.encoder.encode(stringB);\n\n    if (bufferA.length !== bufferB.length) {\n      return false;\n    }\n\n    const algorithm = { name: 'HMAC', hash: 'SHA-256' };\n    const key = (await crypto.subtle.generateKey(algorithm, false, [\n      'sign',\n      'verify',\n    ])) as CryptoKey;\n    const hmac = await crypto.subtle.sign(algorithm, key, bufferA);\n    const equal = await crypto.subtle.verify(algorithm, key, hmac, bufferB);\n\n    return equal;\n  }\n\n  async encrypt(\n    plaintext: Uint8Array,\n    key: Uint8Array,\n    iv?: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<{\n    ciphertext: Uint8Array;\n    iv: Uint8Array;\n    tag: Uint8Array;\n  }> {\n    const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));\n\n    const cryptoKey = await this.subtleCrypto.importKey(\n      'raw',\n      key as BufferSource,\n      { name: 'AES-GCM' },\n      false,\n      ['encrypt'],\n    );\n\n    const encryptParams: AesGcmParams = {\n      name: 'AES-GCM',\n      iv: actualIv as BufferSource,\n    };\n\n    if (aad) {\n      encryptParams.additionalData = aad as BufferSource;\n    }\n\n    const encryptedData = await this.subtleCrypto.encrypt(\n      encryptParams,\n      cryptoKey,\n      plaintext as BufferSource,\n    );\n\n    const encryptedBytes = new Uint8Array(encryptedData);\n\n    // Extract tag (last 16 bytes)\n    const tagSize = 16;\n    const tagStart = encryptedBytes.length - tagSize;\n    const tag = encryptedBytes.slice(tagStart);\n    const ciphertext = encryptedBytes.slice(0, tagStart);\n\n    return {\n      ciphertext,\n      iv: actualIv,\n      tag,\n    };\n  }\n\n  async decrypt(\n    ciphertext: Uint8Array,\n    key: Uint8Array,\n    iv: Uint8Array,\n    tag: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<Uint8Array> {\n    // SubtleCrypto expects tag to be appended to ciphertext for AES-GCM\n    const combinedData = new Uint8Array(ciphertext.length + tag.length);\n    combinedData.set(ciphertext, 0);\n    combinedData.set(tag, ciphertext.length);\n\n    const cryptoKey = await this.subtleCrypto.importKey(\n      'raw',\n      key as BufferSource,\n      { name: 'AES-GCM' },\n      false,\n      ['decrypt'],\n    );\n\n    const decryptParams: AesGcmParams = {\n      name: 'AES-GCM',\n      iv: iv as BufferSource,\n    };\n\n    if (aad) {\n      decryptParams.additionalData = aad as BufferSource;\n    }\n\n    const decryptedData = await this.subtleCrypto.decrypt(\n      decryptParams,\n      cryptoKey,\n      combinedData,\n    );\n\n    return new Uint8Array(decryptedData);\n  }\n\n  randomBytes(length: number): Uint8Array {\n    const bytes = new Uint8Array(length);\n    crypto.getRandomValues(bytes);\n    return bytes;\n  }\n}\n\n// Cached mapping of byte to hex representation. We do this once to avoid re-\n// computing every time we need to convert the result of a signature to hex.\nconst byteHexMapping = new Array(256);\nfor (let i = 0; i < byteHexMapping.length; i++) {\n  byteHexMapping[i] = i.toString(16).padStart(2, '0');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6BAA+B;AAOxB,MAAM,6BAA6B,sCAAe;AAAA,EAPzD,OAOyD;AAAA;AAAA;AAAA,EACvD;AAAA,EAEA,YAAY,cAA6B;AACvC,UAAM;AAKN,SAAK,eAAe,gBAAgB,OAAO;AAAA,EAC7C;AAAA,EAEA,qBAAqB,UAAkB,SAAyB;AAC9D,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,0BACJ,SACA,QACiB;AACjB,UAAM,UAAU,IAAI,YAAY;AAEhC,UAAM,MAAM,MAAM,KAAK,aAAa;AAAA,MAClC;AAAA,MACA,QAAQ,OAAO,MAAM;AAAA,MACrB;AAAA,QACE,MAAM;AAAA,QACN,MAAM,EAAE,MAAM,UAAU;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAEA,UAAM,kBAAkB,MAAM,KAAK,aAAa;AAAA,MAC9C;AAAA,MACA;AAAA,MACA,QAAQ,OAAO,OAAO;AAAA,IACxB;AAKA,UAAM,iBAAiB,IAAI,WAAW,eAAe;AACrD,UAAM,oBAAoB,IAAI,MAAM,eAAe,MAAM;AAEzD,aAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,wBAAkB,CAAC,IAAI,eAAe,eAAe,CAAC,CAAC;AAAA,IACzD;AAEA,WAAO,kBAAkB,KAAK,EAAE;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,cAAc,SAAiB,SAAmC;AACtE,UAAM,UAAU,KAAK,QAAQ,OAAO,OAAO;AAC3C,UAAM,UAAU,KAAK,QAAQ,OAAO,OAAO;AAE3C,QAAI,QAAQ,WAAW,QAAQ,QAAQ;AACrC,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,EAAE,MAAM,QAAQ,MAAM,UAAU;AAClD,UAAM,MAAO,MAAM,OAAO,OAAO,YAAY,WAAW,OAAO;AAAA,MAC7D;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,OAAO,MAAM,OAAO,OAAO,KAAK,WAAW,KAAK,OAAO;AAC7D,UAAM,QAAQ,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK,MAAM,OAAO;AAEtE,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QACJ,WACA,KACA,IACA,KAKC;AACD,UAAM,WAAW,MAAM,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AAEhE,UAAM,YAAY,MAAM,KAAK,aAAa;AAAA,MACxC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU;AAAA,MAClB;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAEA,UAAM,gBAA8B;AAAA,MAClC,MAAM;AAAA,MACN,IAAI;AAAA,IACN;AAEA,QAAI,KAAK;AACP,oBAAc,iBAAiB;AAAA,IACjC;AAEA,UAAM,gBAAgB,MAAM,KAAK,aAAa;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,iBAAiB,IAAI,WAAW,aAAa;AAGnD,UAAM,UAAU;AAChB,UAAM,WAAW,eAAe,SAAS;AACzC,UAAM,MAAM,eAAe,MAAM,QAAQ;AACzC,UAAM,aAAa,eAAe,MAAM,GAAG,QAAQ;AAEnD,WAAO;AAAA,MACL;AAAA,MACA,IAAI;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,YACA,KACA,IACA,KACA,KACqB;AAErB,UAAM,eAAe,IAAI,WAAW,WAAW,SAAS,IAAI,MAAM;AAClE,iBAAa,IAAI,YAAY,CAAC;AAC9B,iBAAa,IAAI,KAAK,WAAW,MAAM;AAEvC,UAAM,YAAY,MAAM,KAAK,aAAa;AAAA,MACxC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU;AAAA,MAClB;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAEA,UAAM,gBAA8B;AAAA,MAClC,MAAM;AAAA,MACN;AAAA,IACF;AAEA,QAAI,KAAK;AACP,oBAAc,iBAAiB;AAAA,IACjC;AAEA,UAAM,gBAAgB,MAAM,KAAK,aAAa;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,WAAO,IAAI,WAAW,aAAa;AAAA,EACrC;AAAA,EAEA,YAAY,QAA4B;AACtC,UAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,WAAO,gBAAgB,KAAK;AAC5B,WAAO;AAAA,EACT;AACF;AAIA,MAAM,iBAAiB,IAAI,MAAM,GAAG;AACpC,SAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,iBAAe,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACpD;","names":[]}

package/lib/cjs/common/crypto/subtle-crypto-provider.d.cts

@@ -1,25 +0,0 @@
-import { CryptoProvider } from './crypto-provider.cjs';
-
-/**
- * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.
- *
- * This only supports asynchronous operations.
- */
-declare class SubtleCryptoProvider extends CryptoProvider {
-    subtleCrypto: SubtleCrypto;
-    constructor(subtleCrypto?: SubtleCrypto);
-    computeHMACSignature(_payload: string, _secret: string): string;
-    /** @override */
-    computeHMACSignatureAsync(payload: string, secret: string): Promise<string>;
-    /** @override */
-    secureCompare(stringA: string, stringB: string): Promise<boolean>;
-    encrypt(plaintext: Uint8Array, key: Uint8Array, iv?: Uint8Array, aad?: Uint8Array): Promise<{
-        ciphertext: Uint8Array;
-        iv: Uint8Array;
-        tag: Uint8Array;
-    }>;
-    decrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, tag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
-    randomBytes(length: number): Uint8Array;
-}
-
-export { SubtleCryptoProvider };

package/lib/cjs/common/exceptions/bad-request.exception.cjs

@@ -1,58 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var bad_request_exception_exports = {};
-__export(bad_request_exception_exports, {
-  BadRequestException: () => BadRequestException
-});
-module.exports = __toCommonJS(bad_request_exception_exports);
-class BadRequestException extends Error {
-  static {
-    __name(this, "BadRequestException");
-  }
-  status = 400;
-  name = "BadRequestException";
-  message = "Bad request";
-  code;
-  errors;
-  requestID;
-  constructor({
-    code,
-    errors,
-    message,
-    requestID
-  }) {
-    super();
-    this.requestID = requestID;
-    if (message) {
-      this.message = message;
-    }
-    if (code) {
-      this.code = code;
-    }
-    if (errors) {
-      this.errors = errors;
-    }
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  BadRequestException
-});
-//# sourceMappingURL=bad-request.exception.cjs.map

package/lib/cjs/common/exceptions/bad-request.exception.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/common/exceptions/bad-request.exception.ts"],"sourcesContent":["import { RequestException } from '../interfaces/request-exception.interface';\n\nexport class BadRequestException extends Error implements RequestException {\n  readonly status = 400;\n  readonly name = 'BadRequestException';\n  readonly message: string = 'Bad request';\n  readonly code?: string;\n  readonly errors?: unknown[];\n  readonly requestID: string;\n\n  constructor({\n    code,\n    errors,\n    message,\n    requestID,\n  }: {\n    code?: string;\n    errors?: unknown[];\n    message?: string;\n    requestID: string;\n  }) {\n    super();\n\n    this.requestID = requestID;\n\n    if (message) {\n      this.message = message;\n    }\n\n    if (code) {\n      this.code = code;\n    }\n\n    if (errors) {\n      this.errors = errors;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEO,MAAM,4BAA4B,MAAkC;AAAA,EAF3E,OAE2E;AAAA;AAAA;AAAA,EAChE,SAAS;AAAA,EACT,OAAO;AAAA,EACP,UAAkB;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKG;AACD,UAAM;AAEN,SAAK,YAAY;AAEjB,QAAI,SAAS;AACX,WAAK,UAAU;AAAA,IACjB;AAEA,QAAI,MAAM;AACR,WAAK,OAAO;AAAA,IACd;AAEA,QAAI,QAAQ;AACV,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AACF;","names":[]}

package/lib/cjs/common/exceptions/bad-request.exception.d.cts

@@ -1,18 +0,0 @@
-import { RequestException } from '../interfaces/request-exception.interface.cjs';
-
-declare class BadRequestException extends Error implements RequestException {
-    readonly status = 400;
-    readonly name = "BadRequestException";
-    readonly message: string;
-    readonly code?: string;
-    readonly errors?: unknown[];
-    readonly requestID: string;
-    constructor({ code, errors, message, requestID, }: {
-        code?: string;
-        errors?: unknown[];
-        message?: string;
-        requestID: string;
-    });
-}
-
-export { BadRequestException };

package/lib/cjs/common/exceptions/conflict.exception.cjs

@@ -1,52 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var conflict_exception_exports = {};
-__export(conflict_exception_exports, {
-  ConflictException: () => ConflictException
-});
-module.exports = __toCommonJS(conflict_exception_exports);
-class ConflictException extends Error {
-  static {
-    __name(this, "ConflictException");
-  }
-  status = 409;
-  name = "ConflictException";
-  requestID;
-  constructor({
-    error,
-    message,
-    requestID
-  }) {
-    super();
-    this.requestID = requestID;
-    if (message) {
-      this.message = message;
-    } else if (error) {
-      this.message = `Error: ${error}`;
-    } else {
-      this.message = `An conflict has occurred on the server.`;
-    }
-  }
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  ConflictException
-});
-//# sourceMappingURL=conflict.exception.cjs.map

package/lib/cjs/common/exceptions/conflict.exception.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/common/exceptions/conflict.exception.ts"],"sourcesContent":["import { RequestException } from '../interfaces/request-exception.interface';\n\nexport class ConflictException extends Error implements RequestException {\n  readonly status = 409;\n  readonly name = 'ConflictException';\n  readonly requestID: string;\n\n  constructor({\n    error,\n    message,\n    requestID,\n  }: {\n    error?: string;\n    message?: string;\n    requestID: string;\n  }) {\n    super();\n\n    this.requestID = requestID;\n\n    if (message) {\n      this.message = message;\n    } else if (error) {\n      this.message = `Error: ${error}`;\n    } else {\n      this.message = `An conflict has occurred on the server.`;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEO,MAAM,0BAA0B,MAAkC;AAAA,EAFzE,OAEyE;AAAA;AAAA;AAAA,EAC9D,SAAS;AAAA,EACT,OAAO;AAAA,EACP;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM;AAEN,SAAK,YAAY;AAEjB,QAAI,SAAS;AACX,WAAK,UAAU;AAAA,IACjB,WAAW,OAAO;AAChB,WAAK,UAAU,UAAU,KAAK;AAAA,IAChC,OAAO;AACL,WAAK,UAAU;AAAA,IACjB;AAAA,EACF;AACF;","names":[]}

package/lib/cjs/common/exceptions/conflict.exception.d.cts

@@ -1,14 +0,0 @@
-import { RequestException } from '../interfaces/request-exception.interface.cjs';
-
-declare class ConflictException extends Error implements RequestException {
-    readonly status = 409;
-    readonly name = "ConflictException";
-    readonly requestID: string;
-    constructor({ error, message, requestID, }: {
-        error?: string;
-        message?: string;
-        requestID: string;
-    });
-}
-
-export { ConflictException };

package/lib/cjs/common/exceptions/generic-server.exception.cjs

@@ -1,45 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var generic_server_exception_exports = {};
-__export(generic_server_exception_exports, {
-  GenericServerException: () => GenericServerException
-});
-module.exports = __toCommonJS(generic_server_exception_exports);
-class GenericServerException extends Error {
-  constructor(status, message, rawData, requestID) {
-    super();
-    this.status = status;
-    this.rawData = rawData;
-    this.requestID = requestID;
-    if (message) {
-      this.message = message;
-    }
-  }
-  static {
-    __name(this, "GenericServerException");
-  }
-  name = "GenericServerException";
-  message = "The request could not be completed.";
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  GenericServerException
-});
-//# sourceMappingURL=generic-server.exception.cjs.map

package/lib/cjs/common/exceptions/generic-server.exception.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/common/exceptions/generic-server.exception.ts"],"sourcesContent":["import { RequestException } from '../interfaces/request-exception.interface';\n\nexport class GenericServerException extends Error implements RequestException {\n  readonly name: string = 'GenericServerException';\n  readonly message: string = 'The request could not be completed.';\n\n  constructor(\n    readonly status: number,\n    message: string | undefined,\n    readonly rawData: unknown,\n    readonly requestID: string,\n  ) {\n    super();\n    if (message) {\n      this.message = message;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEO,MAAM,+BAA+B,MAAkC;AAAA,EAI5E,YACW,QACT,SACS,SACA,WACT;AACA,UAAM;AALG;AAEA;AACA;AAGT,QAAI,SAAS;AACX,WAAK,UAAU;AAAA,IACjB;AAAA,EACF;AAAA,EAhBF,OAE8E;AAAA;AAAA;AAAA,EACnE,OAAe;AAAA,EACf,UAAkB;AAa7B;","names":[]}

package/lib/cjs/common/exceptions/generic-server.exception.d.cts

@@ -1,12 +0,0 @@
-import { RequestException } from '../interfaces/request-exception.interface.cjs';
-
-declare class GenericServerException extends Error implements RequestException {
-    readonly status: number;
-    readonly rawData: unknown;
-    readonly requestID: string;
-    readonly name: string;
-    readonly message: string;
-    constructor(status: number, message: string | undefined, rawData: unknown, requestID: string);
-}
-
-export { GenericServerException };

package/lib/cjs/common/exceptions/index.cjs

@@ -1,39 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var exceptions_exports = {};
-module.exports = __toCommonJS(exceptions_exports);
-__reExport(exceptions_exports, require('./generic-server.exception.cjs'), module.exports);
-__reExport(exceptions_exports, require('./bad-request.exception.cjs'), module.exports);
-__reExport(exceptions_exports, require('./no-api-key-provided.exception.cjs'), module.exports);
-__reExport(exceptions_exports, require('./not-found.exception.cjs'), module.exports);
-__reExport(exceptions_exports, require('./oauth.exception.cjs'), module.exports);
-__reExport(exceptions_exports, require('./rate-limit-exceeded.exception.cjs'), module.exports);
-__reExport(exceptions_exports, require('./signature-verification.exception.cjs'), module.exports);
-__reExport(exceptions_exports, require('./unauthorized.exception.cjs'), module.exports);
-__reExport(exceptions_exports, require('./unprocessable-entity.exception.cjs'), module.exports);
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  ...require('./generic-server.exception.cjs'),
-  ...require('./bad-request.exception.cjs'),
-  ...require('./no-api-key-provided.exception.cjs'),
-  ...require('./not-found.exception.cjs'),
-  ...require('./oauth.exception.cjs'),
-  ...require('./rate-limit-exceeded.exception.cjs'),
-  ...require('./signature-verification.exception.cjs'),
-  ...require('./unauthorized.exception.cjs'),
-  ...require('./unprocessable-entity.exception.cjs')
-});
-//# sourceMappingURL=index.cjs.map

package/lib/cjs/common/exceptions/index.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/common/exceptions/index.ts"],"sourcesContent":["export * from './generic-server.exception';\nexport * from './bad-request.exception';\nexport * from './no-api-key-provided.exception';\nexport * from './not-found.exception';\nexport * from './oauth.exception';\nexport * from './rate-limit-exceeded.exception';\nexport * from './signature-verification.exception';\nexport * from './unauthorized.exception';\nexport * from './unprocessable-entity.exception';\n"],"mappings":";;;;;;;;;;;;;;;AAAA;AAAA;AAAA,+BAAc,uCAAd;AACA,+BAAc,oCADd;AAEA,+BAAc,4CAFd;AAGA,+BAAc,kCAHd;AAIA,+BAAc,8BAJd;AAKA,+BAAc,4CALd;AAMA,+BAAc,+CANd;AAOA,+BAAc,qCAPd;AAQA,+BAAc,6CARd;","names":[]}

package/lib/cjs/common/exceptions/index.d.cts

@@ -1,11 +0,0 @@
-export { GenericServerException } from './generic-server.exception.cjs';
-export { BadRequestException } from './bad-request.exception.cjs';
-export { NoApiKeyProvidedException } from './no-api-key-provided.exception.cjs';
-export { NotFoundException } from './not-found.exception.cjs';
-export { OauthException } from './oauth.exception.cjs';
-export { RateLimitExceededException } from './rate-limit-exceeded.exception.cjs';
-export { SignatureVerificationException } from './signature-verification.exception.cjs';
-export { UnauthorizedException } from './unauthorized.exception.cjs';
-export { UnprocessableEntityException } from './unprocessable-entity.exception.cjs';
-import '../interfaces/request-exception.interface.cjs';
-import '../interfaces/unprocessable-entity-error.interface.cjs';

package/lib/cjs/common/exceptions/no-api-key-provided.exception.cjs

@@ -1,37 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var no_api_key_provided_exception_exports = {};
-__export(no_api_key_provided_exception_exports, {
-  NoApiKeyProvidedException: () => NoApiKeyProvidedException
-});
-module.exports = __toCommonJS(no_api_key_provided_exception_exports);
-class NoApiKeyProvidedException extends Error {
-  static {
-    __name(this, "NoApiKeyProvidedException");
-  }
-  status = 500;
-  name = "NoApiKeyProvidedException";
-  message = `Missing API key. Pass it to the constructor (new WorkOS("sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU")) or define it in the WORKOS_API_KEY environment variable.`;
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  NoApiKeyProvidedException
-});
-//# sourceMappingURL=no-api-key-provided.exception.cjs.map

package/lib/cjs/common/exceptions/no-api-key-provided.exception.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/common/exceptions/no-api-key-provided.exception.ts"],"sourcesContent":["export class NoApiKeyProvidedException extends Error {\n  readonly status = 500;\n  readonly name = 'NoApiKeyProvidedException';\n  readonly message =\n    `Missing API key. Pass it to the constructor (new WorkOS(\"sk_test_Sz3IQjepeSWaI4cMS4ms4sMuU\")) ` +\n    `or define it in the WORKOS_API_KEY environment variable.`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAO,MAAM,kCAAkC,MAAM;AAAA,EAArD,OAAqD;AAAA;AAAA;AAAA,EAC1C,SAAS;AAAA,EACT,OAAO;AAAA,EACP,UACP;AAEJ;","names":[]}

package/lib/cjs/common/exceptions/no-api-key-provided.exception.d.cts

@@ -1,7 +0,0 @@
-declare class NoApiKeyProvidedException extends Error {
-    readonly status = 500;
-    readonly name = "NoApiKeyProvidedException";
-    readonly message: string;
-}
-
-export { NoApiKeyProvidedException };